pidgin MSN protocol integer overflow in slplink.c

[Fumihito YOSHIDA]

see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2927

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in
  (1) libpurple/protocols/msn/slplink.c
  (2) libpurple/protocols/msnp9/slplink.c
in Pidgin before 2.4.3 allow remote attackers to execute arbitrary code via a malformed SLP message,
a different vulnerability than CVE-2008-2955(*).

 (*) CVE-2008-2955 is unpatched (zero-day).

[Ikuya Awashiro (ikuya-fruitsbasket)]

Here is the debdiff.

[Ikuya Awashiro (ikuya-fruitsbasket)]

Here is the newest. comment1 is wrong.

[Fumihito YOSHIDA (hito)]

published.